@jini-ai/integrations 0.3.2 → 0.3.4

package/dist/media-providers/dispatch/operation-runtime.js

@@ -0,0 +1,311 @@
+/**
+ * The submit-then-poll runtime: the piece that turns a `PollingVendorAdapter` plus an
+ * `AsyncOperationStore` into an operation that survives a restart.
+ *
+ * ## Persist first, then race
+ *
+ * `startOperation` writes the operation row **before** it issues any HTTP call, then races the
+ * in-flight submit against a short interactive grace window. If the vendor answers in time the
+ * caller gets `{done: true, result}` in the same round trip — indistinguishable from the
+ * synchronous tier. If it does not, the caller gets `{done: false, operationId}` and the *same*
+ * in-flight request keeps running and writes its own outcome into the row.
+ *
+ * That ordering is what makes crash safety fall out for free rather than being bolted on: there is
+ * no window in which work exists only inside a process. It is also why this is a race and not a
+ * fork — there is exactly one submit code path, and `expectedLatencyClass` only decides how long
+ * the caller is willing to wait on it, never what happens.
+ *
+ * Human callers and agents get the identical contract: a result, or an id to come back with.
+ *
+ * ## What is deliberately NOT here
+ *
+ * No scheduler. `pollDueOperations` is a single leased tick a host drives from whatever timer or
+ * queue it already runs — this package performs no I/O of its own beyond the vendor calls it is
+ * handed a `fetchImpl` for, a standing invariant across `@jini-ai/integrations/media-providers`.
+ */
+import { FETCH_TIMEOUT_MS, fetchWithTimeout } from '@jini-ai/platform';
+/** Interactive budget for the inline attempt. Deliberately NOT `FETCH_TIMEOUT_MS.GENERATE` (10min) — that is the backstop for the *request*, this is the ceiling on making a human wait. */
+export const DEFAULT_GRACE_MS = 4_000;
+export const DEFAULT_MAX_ATTEMPTS = 60;
+export const DEFAULT_DEADLINE_MS = 15 * 60_000;
+export const DEFAULT_POLL_INTERVAL_MS = 5_000;
+/**
+ * Backoff between retries of the write that records a vendor job handle after a successful
+ * submit. A handle that made it past the vendor round trip must not be dropped just because the
+ * very next write is transiently unlucky — see `startOperation`'s post-submit persistence.
+ */
+export const DEFAULT_PERSIST_RETRY_DELAYS_MS = [50, 150, 400];
+/** The lease identity used by boot recovery's claim-then-release read, distinct from any real worker. */
+const RECOVERY_LEASE_OWNER = '__recovery__';
+function resultToPayload(result) {
+    return {
+        bytesBase64: result.bytes.toString('base64'),
+        providerNote: result.providerNote,
+        ...(result.suggestedExt !== undefined ? { suggestedExt: result.suggestedExt } : {}),
+    };
+}
+function toOperationError(error) {
+    return { message: error instanceof Error ? error.message : String(error) };
+}
+async function performSigned(deps, request, timeoutMs) {
+    const signed = await deps.signer(request);
+    const doFetch = deps.fetchImpl;
+    if (doFetch)
+        return doFetch(signed.url, signed.init);
+    return fetchWithTimeout(signed.url, signed.init, { timeoutMs });
+}
+/** Issues the submit call and parses it. Isolated from persistence so callers can tell "nothing was obtained from the vendor" apart from "a handle was obtained but recording it failed" — only the former is safe to treat as terminal. */
+async function submitAndParse(deps, params) {
+    try {
+        const request = params.adapter.buildSubmitRequest(params.ctx);
+        const resp = await performSigned(deps, request, FETCH_TIMEOUT_MS.GENERATE);
+        const outcome = await params.adapter.parseSubmitResponse(resp, params.ctx, request);
+        return { ok: true, outcome };
+    }
+    catch (error) {
+        return { ok: false, error };
+    }
+}
+/**
+ * Applies a store patch, retrying on failure per `retryDelaysMs`. Never throws — callers past
+ * this point already hold a real vendor job handle or a finished result, so the write is retried
+ * rather than let a transient failure fall through to a `'failed'` label that would erase it.
+ *
+ * @returns Whether the write eventually succeeded. On `false`, the row is left exactly as it was
+ *   before this call — for the post-submit write, that means `'submitted'`, which
+ *   `recoverAfterRestart`'s crash-gap handling already knows how to reconcile safely, rather than
+ *   a `'failed'` row that recovery ignores as terminal.
+ * @complexity O(retryDelaysMs.length) store round trips in the worst case.
+ */
+async function persistWithRetry(store, operationId, patch, retryDelaysMs) {
+    for (let attempt = 0; attempt <= retryDelaysMs.length; attempt += 1) {
+        try {
+            await store.update(operationId, patch);
+            return true;
+        }
+        catch {
+            if (attempt === retryDelaysMs.length)
+                return false;
+            await new Promise((resolve) => setTimeout(resolve, retryDelaysMs[attempt]));
+        }
+    }
+    return false;
+}
+/**
+ * Persists the operation row, issues the submit, and races it against the grace window.
+ *
+ * @returns `{done: true, result}` when the vendor finished inside the grace window, else
+ *   `{done: false, operationId}` — the row is already durable in both cases.
+ * @complexity O(1) plus one vendor round trip.
+ */
+export async function startOperation(deps, params) {
+    const now = deps.now ?? Date.now;
+    const newId = deps.newId ?? (() => `op_${Math.random().toString(36).slice(2, 10)}_${now()}`);
+    const startedAt = now();
+    const operationId = newId();
+    // Before any HTTP call — this ordering IS the crash-safety mechanism.
+    await deps.store.create({
+        id: operationId,
+        providerId: params.providerId,
+        routeKey: params.routeKey,
+        ownerRef: params.ownerRef,
+        maxAttempts: params.maxAttempts ?? DEFAULT_MAX_ATTEMPTS,
+        deadlineAt: startedAt + (params.deadlineMs ?? DEFAULT_DEADLINE_MS),
+        nextPollAt: startedAt,
+    });
+    const settle = (async () => {
+        const submitted = await submitAndParse(deps, params);
+        if (!submitted.ok) {
+            // Nothing was obtained from the vendor — no job handle exists to protect, so a single
+            // terminal write is safe. Best-effort even here: a write failure at this point must not
+            // reject `settle` (see the `finally` below) and leaves the row `'submitted'`, which is at
+            // least as safe as `'failed'` would have been.
+            await deps.store.update(operationId, { status: 'failed', error: toOperationError(submitted.error) }).catch(() => undefined);
+            return { done: false, operationId };
+        }
+        const { outcome } = submitted;
+        // Past this point a vendor job handle exists (or the job already finished) — losing either
+        // to a transient store write is strictly worse than the failure it would otherwise record,
+        // so the write is retried before anything is allowed to fall back to a `'failed'` label.
+        const patch = outcome.kind === 'complete'
+            ? { status: 'succeeded', result: resultToPayload(outcome.result) }
+            : { status: 'polling', state: outcome.state, nextPollAt: now() + (outcome.retryAfterMs ?? DEFAULT_POLL_INTERVAL_MS) };
+        await persistWithRetry(deps.store, operationId, patch, deps.persistRetryDelaysMs ?? DEFAULT_PERSIST_RETRY_DELAYS_MS);
+        // Even on exhausted retries there is nothing safer left to do here: the row stays exactly as
+        // `create()` left it (`'submitted'`), and `recoverAfterRestart`'s crash-gap handling exists
+        // precisely for a row whose outcome could not be confirmed durable.
+        if (outcome.kind === 'complete')
+            return { done: true, operationId, result: outcome.result };
+        return { done: false, operationId };
+    })();
+    const graceMs = params.graceMs ?? DEFAULT_GRACE_MS;
+    // A `'slow'` vendor is not worth making anyone wait on: the race is still the same single code
+    // path, its window is just zero.
+    const effectiveGraceMs = params.adapter.expectedLatencyClass === 'slow' ? 0 : graceMs;
+    let graceTimer;
+    const grace = new Promise((resolve) => {
+        graceTimer = setTimeout(() => resolve({ done: false, operationId }), effectiveGraceMs);
+    });
+    try {
+        // The losing side is never cancelled — an abandoned submit keeps running and settles the row
+        // the caller already holds an id for.
+        return await Promise.race([settle, grace]);
+    }
+    finally {
+        if (graceTimer)
+            clearTimeout(graceTimer);
+        // The caller may have walked away; the row still gets written, but an unobserved rejection
+        // must not take the process down.
+        void settle.catch(() => undefined);
+    }
+}
+/**
+ * One leased worker tick: claims every due operation, advances each by exactly one vendor poll,
+ * and releases the lease. Safe to run concurrently on several workers — `claimDue` is the
+ * exclusion mechanism.
+ *
+ * Both bounds are enforced here, and in this order: the absolute deadline is checked *before* any
+ * vendor call (a blown deadline must not cost another request), the attempt cap after it.
+ *
+ * @complexity O(k) vendor round trips for k claimed operations.
+ */
+export async function pollDueOperations(deps, params) {
+    const now = deps.now ?? Date.now;
+    const claimed = await deps.store.claimDue({
+        now: now(),
+        leaseOwner: params.leaseOwner,
+        leaseMs: params.leaseMs,
+        ...(params.limit !== undefined ? { limit: params.limit } : {}),
+    });
+    let completed = 0;
+    let failed = 0;
+    let pending = 0;
+    let unknown = 0;
+    for (const row of claimed) {
+        try {
+            const at = now();
+            if (row.deadlineAt <= at) {
+                await deps.store.update(row.id, {
+                    status: 'unknown',
+                    error: {
+                        message: 'async operation passed its absolute deadline — vendor-side effect is undetermined',
+                        code: 'DEADLINE_EXPIRED',
+                    },
+                });
+                unknown += 1;
+                continue;
+            }
+            if (row.attempts >= row.maxAttempts) {
+                await deps.store.update(row.id, {
+                    status: 'failed',
+                    error: {
+                        message: `async operation exhausted its ${row.maxAttempts} poll attempts without a terminal answer`,
+                        code: 'ATTEMPTS_EXHAUSTED',
+                    },
+                });
+                failed += 1;
+                continue;
+            }
+            const adapter = params.adapters(row.providerId, row.routeKey);
+            if (!adapter) {
+                await deps.store.update(row.id, {
+                    status: 'failed',
+                    error: { message: `no polling adapter registered for "${row.providerId}" / "${row.routeKey}"`, code: 'NO_ADAPTER' },
+                });
+                failed += 1;
+                continue;
+            }
+            const ctx = params.resolveContext(row);
+            const request = adapter.buildPollRequest(row.state ?? {}, ctx);
+            // Credentials are resolved here, on this tick — never read from the row.
+            const resp = await performSigned(deps, request, FETCH_TIMEOUT_MS.QUICK);
+            const outcome = await adapter.parsePollResponse(resp, ctx, row.state ?? {});
+            if (outcome.kind === 'complete') {
+                await deps.store.update(row.id, {
+                    status: 'succeeded',
+                    attempts: row.attempts + 1,
+                    result: resultToPayload(outcome.result),
+                });
+                completed += 1;
+            }
+            else if (outcome.kind === 'failed') {
+                await deps.store.update(row.id, {
+                    status: 'failed',
+                    attempts: row.attempts + 1,
+                    error: { message: outcome.message, ...(outcome.code !== undefined ? { code: outcome.code } : {}) },
+                });
+                failed += 1;
+            }
+            else {
+                await deps.store.update(row.id, {
+                    status: 'polling',
+                    attempts: row.attempts + 1,
+                    nextPollAt: at + (outcome.retryAfterMs ?? DEFAULT_POLL_INTERVAL_MS),
+                });
+                pending += 1;
+            }
+        }
+        catch (error) {
+            // A transport failure is not a vendor verdict: keep the row pollable and let the attempt cap
+            // or the deadline end it, rather than reporting a definitive failure we cannot support.
+            await deps.store.update(row.id, {
+                status: 'polling',
+                attempts: row.attempts + 1,
+                nextPollAt: now() + DEFAULT_POLL_INTERVAL_MS,
+                error: toOperationError(error),
+            });
+            pending += 1;
+        }
+        finally {
+            await deps.store.releaseLease(row.id, params.leaseOwner);
+        }
+    }
+    return { claimed: claimed.length, completed, failed, pending, unknown };
+}
+/**
+ * Boot-time recovery. Releases dead leases and expires blown deadlines via the store, then handles
+ * the one case the store cannot decide alone: a row still at `submitted`, meaning the process died
+ * between persisting the row and learning whether the vendor accepted the submit.
+ *
+ * Retry safety is gated on idempotency, not assumed. An adapter that has not declared
+ * `submitIsIdempotent` sends that row to `unknown` for reconciliation — media generation is billed
+ * per call, so a silent re-issue can double a real charge.
+ *
+ * @complexity O(n) in stored operations.
+ */
+export async function recoverAfterRestart(deps, params) {
+    const at = params.now ?? (deps.now ?? Date.now)();
+    const reconciled = await deps.store.reconcileOnBoot({ now: at });
+    const resubmittable = [];
+    let unknownCrashGap = 0;
+    for (const row of await collectSubmitted(deps.store)) {
+        const adapter = params.adapters(row.providerId, row.routeKey);
+        if (adapter?.submitIsIdempotent === true) {
+            resubmittable.push(row.id);
+            continue;
+        }
+        await deps.store.update(row.id, {
+            status: 'unknown',
+            error: {
+                message: 'process died before the vendor submit was confirmed, and this adapter does not declare the submit idempotent — reconcile manually rather than risk a duplicate charge',
+                code: 'CRASH_GAP_NOT_IDEMPOTENT',
+            },
+        });
+        unknownCrashGap += 1;
+    }
+    return { ...reconciled, unknownCrashGap, resubmittable };
+}
+/**
+ * The `submitted` rows a restart orphaned. Uses the store's own claim-free read path so recovery
+ * never competes with a live worker for a lease.
+ */
+async function collectSubmitted(store) {
+    const seen = new Map();
+    for (const row of await store.claimDue({ now: Number.MAX_SAFE_INTEGER, leaseOwner: RECOVERY_LEASE_OWNER, leaseMs: 0, limit: Number.MAX_SAFE_INTEGER })) {
+        if (row.status === 'submitted')
+            seen.set(row.id, row);
+        await store.releaseLease(row.id, RECOVERY_LEASE_OWNER);
+    }
+    return [...seen.values()];
+}
+//# sourceMappingURL=operation-runtime.js.map

package/dist/media-providers/dispatch/operation-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-runtime.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/operation-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAWvE,4LAA4L;AAC5L,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAC9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAsB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAEjF,yGAAyG;AACzG,MAAM,oBAAoB,GAAG,cAAc,CAAC;AA2B5C,SAAS,eAAe,CAAC,MAAoB;IAC3C,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC5C,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAA0B,EAC1B,OAAuC,EACvC,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;IAC/B,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,4OAA4O;AAC5O,KAAK,UAAU,cAAc,CAC3B,IAA0B,EAC1B,MAAkC;IAElC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAyC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,gBAAgB,CAC7B,KAA0B,EAC1B,WAAmB,EACnB,KAA0B,EAC1B,aAAgC;IAEhC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,KAAK,aAAa,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACnD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA0B,EAC1B,MAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,WAAW,GAAG,KAAK,EAAE,CAAC;IAE5B,sEAAsE;IACtE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACtB,EAAE,EAAE,WAAW;QACf,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,oBAAoB;QACvD,UAAU,EAAE,SAAS,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAClE,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,CAAC,KAAK,IAAoC,EAAE;QACzD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAErD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,sFAAsF;YACtF,wFAAwF;YACxF,0FAA0F;YAC1F,+CAA+C;YAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5H,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;QAC9B,2FAA2F;QAC3F,2FAA2F;QAC3F,yFAAyF;QACzF,MAAM,KAAK,GACT,OAAO,CAAC,IAAI,KAAK,UAAU;YACzB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YAClE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,wBAAwB,CAAC,EAAE,CAAC;QAE1H,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,oBAAoB,IAAI,+BAA+B,CAAC,CAAC;QACrH,6FAA6F;QAC7F,4FAA4F;QAC5F,oEAAoE;QAEpE,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACtC,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACnD,+FAA+F;IAC/F,iCAAiC;IACjC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEtF,IAAI,UAAqD,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,EAAE;QAC3D,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,6FAA6F;QAC7F,sCAAsC;QACtC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,IAAI,UAAU;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACzC,2FAA2F;QAC3F,kCAAkC;QAClC,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAoBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA0B,EAAE,MAAqB;IACvF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxC,GAAG,EAAE,GAAG,EAAE;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IAEH,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YAEjB,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,SAAS;oBACjB,KAAK,EAAE;wBACL,OAAO,EAAE,mFAAmF;wBAC5F,IAAI,EAAE,kBAAkB;qBACzB;iBACF,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE;wBACL,OAAO,EAAE,iCAAiC,GAAG,CAAC,WAAW,0CAA0C;wBACnG,IAAI,EAAE,oBAAoB;qBAC3B;iBACF,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,EAAE,OAAO,EAAE,sCAAsC,GAAG,CAAC,UAAU,QAAQ,GAAG,CAAC,QAAQ,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;iBACpH,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/D,yEAAyE;YACzE,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAyC,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1G,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAE5E,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,WAAW;oBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;oBAC1B,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;iBACxC,CAAC,CAAC;gBACH,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;oBAC1B,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;iBACnG,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;oBAC1B,UAAU,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,wBAAwB,CAAC;iBACpE,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6FAA6F;YAC7F,wFAAwF;YACxF,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;gBAC9B,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;gBAC1B,UAAU,EAAE,GAAG,EAAE,GAAG,wBAAwB;gBAC5C,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC;aAC/B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC1E,CAAC;AAgBD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAA0B,EAAE,MAAqB;IACzF,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAEjE,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,GAAG,IAAI,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,OAAO,EAAE,kBAAkB,KAAK,IAAI,EAAE,CAAC;YACzC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;YAC9B,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE;gBACL,OAAO,EAAE,uKAAuK;gBAChL,IAAI,EAAE,0BAA0B;aACjC;SACF,CAAC,CAAC;QACH,eAAe,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,GAAG,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,KAA0B;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgC,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACvJ,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC"}

package/dist/media-providers/dispatch/polling-adapter.d.ts

@@ -0,0 +1,103 @@
+/**
+ * `PollingVendorAdapter` — the submit-then-poll tier, added alongside (never replacing)
+ * `vendor-adapter.ts`'s `VendorAdapter`.
+ *
+ * This is purely additive. `VendorAdapter` is proven across all 18 live registrations and is
+ * untouched: a vendor that finishes inside one request/response keeps using it. This interface is
+ * for the other shape — a vendor that hands back a job handle and makes you come back for the
+ * result — which `dispatchVendorRequest`'s fixed `buildRequest -> one fetch -> parseResponse`
+ * cannot express at all.
+ *
+ * ## The credential seam
+ *
+ * The deliberate difference from `VendorAdapter`: **these builders never receive credentials.**
+ * `VendorAdapter.buildRequest(ctx, credentials)` hands the adapter a `ProviderCredentials` and the
+ * adapter writes its own `authorization` header. That is fine for one in-process round trip, but a
+ * polled operation outlives the request that started it, so a secret reachable from the adapter is
+ * a secret that wants to be persisted next to the job handle. Here the adapter builds an
+ * *unsigned* request and a `RequestSigner` attaches auth beneath it, re-resolved on every tick —
+ * which is also what makes a token that expires mid-poll a non-event.
+ */
+import type { MediaGenerationRequestInit, ProviderCredentials, RenderContext, RenderResult } from './types.js';
+/**
+ * Whether this vendor is expected to answer within an interactive grace window. It is a property
+ * of the *vendor*, declared once per adapter — never a property of the caller, which is what keeps
+ * the human UI and an agent on one identical contract.
+ */
+export type ExpectedLatencyClass = 'fast' | 'slow';
+/** A vendor request with no auth applied. `init.headers` carries content negotiation only. */
+export interface UnsignedVendorRequest<Meta = undefined> {
+    readonly url: string;
+    readonly init: RequestInit;
+    readonly meta: Meta;
+}
+/** What a submit response turned out to be: the finished artifact, or a handle to come back for. */
+export type SubmitOutcome = {
+    readonly kind: 'complete';
+    readonly result: RenderResult;
+} | {
+    readonly kind: 'pending';
+    readonly state: Readonly<Record<string, unknown>>;
+    readonly retryAfterMs?: number;
+};
+export type PollOutcome = {
+    readonly kind: 'complete';
+    readonly result: RenderResult;
+} | {
+    readonly kind: 'pending';
+    readonly retryAfterMs?: number;
+} | {
+    readonly kind: 'failed';
+    readonly message: string;
+    readonly code?: string;
+};
+export interface PollingVendorAdapter<Meta = undefined> {
+    readonly expectedLatencyClass: ExpectedLatencyClass;
+    /**
+     * Whether re-issuing the submit request is safe when a crash left us unable to tell whether the
+     * first one reached the vendor. Defaults to `false`, which routes that row to `unknown` for
+     * reconciliation instead. There is no unqualified retry-once rule: media generation costs real
+     * money per call, so a retry must be *proven* safe, not assumed.
+     */
+    readonly submitIsIdempotent?: boolean;
+    buildSubmitRequest(ctx: RenderContext): UnsignedVendorRequest<Meta>;
+    parseSubmitResponse(resp: Response, ctx: RenderContext, request: UnsignedVendorRequest<Meta>): Promise<SubmitOutcome>;
+    buildPollRequest(state: Readonly<Record<string, unknown>>, ctx: RenderContext): UnsignedVendorRequest<Meta>;
+    parsePollResponse(resp: Response, ctx: RenderContext, state: Readonly<Record<string, unknown>>): Promise<PollOutcome>;
+}
+/**
+ * A `PollingVendorAdapter` with its `Meta` erased, for heterogeneous lookup by
+ * `(providerId, routeKey)`. `Meta` never crosses this boundary — it only flows from one adapter's
+ * own `build*` to that same adapter's `parse*` — so erasing it here is sound, unlike the `never`
+ * that `VendorAdapterRegistry` uses (which is only sound because every caller re-casts).
+ */
+export type AnyPollingVendorAdapter = PollingVendorAdapter<any>;
+/** A signed request, ready to hand to `fetch`. */
+export interface SignedVendorRequest {
+    readonly url: string;
+    readonly init: RequestInit;
+}
+/**
+ * The broker seam: attaches auth to an unsigned request. Async because a real broker resolves from
+ * a vault / refreshes an OAuth token, and is called once per tick rather than once per operation.
+ */
+export type RequestSigner = (request: UnsignedVendorRequest<unknown>) => Promise<SignedVendorRequest> | SignedVendorRequest;
+/**
+ * Reference signer for the `Authorization: Bearer <key>` scheme every vendor in this package uses.
+ *
+ * `resolve` is invoked per call, never cached here — caching a resolved key inside the signer would
+ * reintroduce exactly the mid-stream-expiry problem this seam exists to remove.
+ *
+ * @throws When `resolve` yields no `apiKey`, using `missingCredentialMessage` — the failure surfaces
+ *   at signing time rather than as an opaque vendor 401.
+ * @complexity O(1) plus whatever `resolve` costs.
+ */
+export declare function createBearerSigner(required: {
+    resolve: () => Promise<ProviderCredentials> | ProviderCredentials;
+    missingCredentialMessage: string;
+}): RequestSigner;
+/** Carries a caller-supplied `dispatcher` onto an unsigned request, matching `withRequestInit`'s role on the sync tier. */
+export declare function withUnsignedRequestInit(ctx: {
+    readonly requestInit: MediaGenerationRequestInit;
+}, init: RequestInit): RequestInit;
+//# sourceMappingURL=polling-adapter.d.ts.map

package/dist/media-providers/dispatch/polling-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling-adapter.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/polling-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/G;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,8FAA8F;AAC9F,MAAM,WAAW,qBAAqB,CAAC,IAAI,GAAG,SAAS;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;CACrB;AAED,oGAAoG;AACpG,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpH,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElF,MAAM,WAAW,oBAAoB,CAAC,IAAI,GAAG,SAAS;IACpD,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpE,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACtH,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5G,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACvH;AAED;;;;;GAKG;AAEH,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAEhE,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;AAE5H;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE;IAAE,OAAO,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE,GAChH,aAAa,CAcf;AAED,2HAA2H;AAC3H,wBAAgB,uBAAuB,CAAC,GAAG,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAA;CAAE,EAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAEjI"}

package/dist/media-providers/dispatch/polling-adapter.js

@@ -0,0 +1,30 @@
+/**
+ * Reference signer for the `Authorization: Bearer <key>` scheme every vendor in this package uses.
+ *
+ * `resolve` is invoked per call, never cached here — caching a resolved key inside the signer would
+ * reintroduce exactly the mid-stream-expiry problem this seam exists to remove.
+ *
+ * @throws When `resolve` yields no `apiKey`, using `missingCredentialMessage` — the failure surfaces
+ *   at signing time rather than as an opaque vendor 401.
+ * @complexity O(1) plus whatever `resolve` costs.
+ */
+export function createBearerSigner(required) {
+    return async (request) => {
+        const credentials = await required.resolve();
+        if (!credentials.apiKey) {
+            throw new Error(required.missingCredentialMessage);
+        }
+        return {
+            url: request.url,
+            init: {
+                ...request.init,
+                headers: { ...request.init.headers, authorization: `Bearer ${credentials.apiKey}` },
+            },
+        };
+    };
+}
+/** Carries a caller-supplied `dispatcher` onto an unsigned request, matching `withRequestInit`'s role on the sync tier. */
+export function withUnsignedRequestInit(ctx, init) {
+    return { ...init, ...(ctx.requestInit.dispatcher ? { dispatcher: ctx.requestInit.dispatcher } : {}) };
+}
+//# sourceMappingURL=polling-adapter.js.map

package/dist/media-providers/dispatch/polling-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling-adapter.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/polling-adapter.ts"],"names":[],"mappings":"AAkFA;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAiH;IAEjH,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QACD,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE;gBACJ,GAAG,OAAO,CAAC,IAAI;gBACf,OAAO,EAAE,EAAE,GAAI,OAAO,CAAC,IAAI,CAAC,OAA8C,EAAE,aAAa,EAAE,UAAU,WAAW,CAAC,MAAM,EAAE,EAAE;aAC5H;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,uBAAuB,CAAC,GAAyD,EAAE,IAAiB;IAClH,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACxG,CAAC"}

package/dist/media-providers/dispatch/providers/imagerouter-video-async.d.ts

@@ -0,0 +1,21 @@
+import type { PollingVendorAdapter } from '../polling-adapter.js';
+/** Non-secret endpoint configuration. Sourceable from a config file or a DB row — never the API key. */
+export interface ImageRouterVideoConfig {
+    readonly baseUrl?: string;
+    /** Overrides the catalog-derived `ctx.wireModel` for the wire request. */
+    readonly wireModel?: string;
+}
+export interface ImageRouterVideoMeta {
+    readonly wireModel: string;
+    readonly size: string;
+    readonly seconds: number | 'auto';
+}
+/**
+ * Builds the ImageRouter video polling adapter for a given endpoint configuration.
+ *
+ * @param config Non-secret endpoint overrides; defaults to ImageRouter's public base URL and the
+ *   context's own `wireModel`.
+ * @complexity O(1) per built request; one vendor round trip per parse.
+ */
+export declare function createImageRouterVideoPollingAdapter(config?: ImageRouterVideoConfig): PollingVendorAdapter<ImageRouterVideoMeta>;
+//# sourceMappingURL=imagerouter-video-async.d.ts.map

package/dist/media-providers/dispatch/providers/imagerouter-video-async.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"imagerouter-video-async.d.ts","sourceRoot":"","sources":["../../../../src/media-providers/dispatch/providers/imagerouter-video-async.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAe,oBAAoB,EAAwC,MAAM,uBAAuB,CAAC;AAKrH,wGAAwG;AACxG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAgBD;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CAClD,MAAM,GAAE,sBAA2B,GAClC,oBAAoB,CAAC,oBAAoB,CAAC,CAqG5C"}

package/dist/media-providers/dispatch/providers/imagerouter-video-async.js

@@ -0,0 +1,141 @@
+/**
+ * ImageRouter video on the submit-then-poll tier.
+ *
+ * ## Why this vendor
+ *
+ * `providers/imagerouter.ts`'s video adapter is `buildRequest -> one fetch -> parseResponse` with
+ * no poll loop at all: it holds a socket open for the entire generation, bounded only by the
+ * blanket `FETCH_TIMEOUT_MS.GENERATE` (10 minute) backstop, and a restart loses the work with no
+ * way to ask the vendor what happened. That sync adapter is left registered and untouched — this
+ * is an additive second registration, not a replacement.
+ *
+ * ## Both response shapes, deliberately
+ *
+ * `parseSubmitResponse` accepts either shape:
+ *
+ * - `{ data: [{ b64_json | url }] }` — the artifact arrived on the submit itself. This is exactly
+ *   what the existing sync adapter expects, so today's behaviour is preserved bit for bit and the
+ *   operation completes inside the grace window.
+ * - `{ id, status }` — an OpenAI-videos-style job handle, so the operation moves to `polling`.
+ *
+ * Handling both is not hedging: **which one ImageRouter actually returns for video is unverified
+ * against the live vendor** (see this file's entry in the handoff). Implementing only the job-handle
+ * shape would have been a guess that silently broke the working path; implementing both is correct
+ * under either answer and costs one `if`.
+ *
+ * ## Config is data
+ *
+ * The endpoint config is a plain object argument, not baked into the module, so the same adapter
+ * can later be instantiated from a database row to make a vendor runtime-addable with no redesign.
+ * Note what is NOT in it: the API key. Endpoint routing is config; the secret is the signer's.
+ */
+import { bytesFromOpenAICompatibleData, parseOpenAICompatibleJson } from '../openai-compatible.js';
+import { imageRouterSizeFor } from './imagerouter.js';
+import { withUnsignedRequestInit } from '../polling-adapter.js';
+const DEFAULT_BASE_URL = 'https://api.imagerouter.io/v1/openai';
+const TERMINAL_FAILED_STATUSES = new Set(['failed', 'error', 'cancelled', 'canceled']);
+function trimTrailingSlash(value) {
+    return value.replace(/\/+$/, '');
+}
+/** Reads a vendor-supplied `Retry-After` (seconds) header, ignoring anything non-numeric. */
+function retryAfterMsFrom(resp) {
+    const raw = resp.headers.get('retry-after');
+    if (!raw)
+        return undefined;
+    const seconds = Number(raw);
+    return Number.isFinite(seconds) && seconds > 0 ? seconds * 1_000 : undefined;
+}
+/**
+ * Builds the ImageRouter video polling adapter for a given endpoint configuration.
+ *
+ * @param config Non-secret endpoint overrides; defaults to ImageRouter's public base URL and the
+ *   context's own `wireModel`.
+ * @complexity O(1) per built request; one vendor round trip per parse.
+ */
+export function createImageRouterVideoPollingAdapter(config = {}) {
+    const baseUrl = trimTrailingSlash((config.baseUrl || DEFAULT_BASE_URL).trim());
+    return {
+        expectedLatencyClass: 'slow',
+        // ImageRouter's generation endpoint accepts no idempotency key, so a submit that may or may
+        // not have landed cannot be safely re-issued — a duplicate submit is a duplicate charge.
+        submitIsIdempotent: false,
+        buildSubmitRequest(ctx) {
+            const wireModel = (config.wireModel || ctx.wireModel).trim();
+            const seconds = typeof ctx.length === 'number' ? ctx.length : 'auto';
+            const size = imageRouterSizeFor(ctx.aspect, 'video');
+            return {
+                url: `${baseUrl}/videos/generations`,
+                init: withUnsignedRequestInit(ctx, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json' },
+                    body: JSON.stringify({
+                        prompt: ctx.prompt || 'A short cinematic clip.',
+                        model: wireModel,
+                        size,
+                        seconds,
+                        response_format: 'b64_json',
+                    }),
+                }),
+                meta: { wireModel, size, seconds },
+            };
+        },
+        async parseSubmitResponse(resp, ctx, request) {
+            const data = (await parseOpenAICompatibleJson(resp, 'imagerouter video'));
+            if (Array.isArray(data.data)) {
+                const bytes = await bytesFromOpenAICompatibleData(data, 'imagerouter video', ctx.requestInit);
+                const { wireModel, size, seconds } = request.meta;
+                return {
+                    kind: 'complete',
+                    result: {
+                        bytes,
+                        providerNote: `imagerouter/${wireModel} · ${size} · ${seconds === 'auto' ? 'auto' : `${seconds}s`} · ${bytes.length} bytes`,
+                        suggestedExt: '.mp4',
+                    },
+                };
+            }
+            if (typeof data.id === 'string' && data.id) {
+                // Only the job handle is persisted — no credential, no request body.
+                const retryAfterMs = retryAfterMsFrom(resp);
+                return { kind: 'pending', state: { jobId: data.id }, ...(retryAfterMs !== undefined ? { retryAfterMs } : {}) };
+            }
+            throw new Error('imagerouter video submit returned neither generated data nor a job id');
+        },
+        buildPollRequest(state, ctx) {
+            const jobId = state.jobId;
+            if (typeof jobId !== 'string' || !jobId) {
+                throw new Error('imagerouter video poll requires a persisted jobId');
+            }
+            return {
+                url: `${baseUrl}/videos/${encodeURIComponent(jobId)}`,
+                init: withUnsignedRequestInit(ctx, { method: 'GET', headers: { accept: 'application/json' } }),
+                meta: { wireModel: (config.wireModel || ctx.wireModel).trim(), size: imageRouterSizeFor(ctx.aspect, 'video'), seconds: typeof ctx.length === 'number' ? ctx.length : 'auto' },
+            };
+        },
+        async parsePollResponse(resp, ctx, _state) {
+            const data = (await parseOpenAICompatibleJson(resp, 'imagerouter video'));
+            const status = typeof data.status === 'string' ? data.status.toLowerCase() : '';
+            if (TERMINAL_FAILED_STATUSES.has(status)) {
+                const error = data.error;
+                const detail = typeof error?.message === 'string' && error.message ? error.message : status;
+                return { kind: 'failed', message: `imagerouter video job failed: ${detail}` };
+            }
+            if (Array.isArray(data.data)) {
+                const bytes = await bytesFromOpenAICompatibleData(data, 'imagerouter video', ctx.requestInit);
+                const wireModel = (config.wireModel || ctx.wireModel).trim();
+                const size = imageRouterSizeFor(ctx.aspect, 'video');
+                const seconds = typeof ctx.length === 'number' ? ctx.length : 'auto';
+                return {
+                    kind: 'complete',
+                    result: {
+                        bytes,
+                        providerNote: `imagerouter/${wireModel} · ${size} · ${seconds === 'auto' ? 'auto' : `${seconds}s`} · ${bytes.length} bytes`,
+                        suggestedExt: '.mp4',
+                    },
+                };
+            }
+            const retryAfterMs = retryAfterMsFrom(resp);
+            return { kind: 'pending', ...(retryAfterMs !== undefined ? { retryAfterMs } : {}) };
+        },
+    };
+}
+//# sourceMappingURL=imagerouter-video-async.js.map